Shands at UF

Shands at UF (Shands at the University of Florida) reported to HHS OCR on 2010-03-01 a laptop theft affecting 12,580 individuals referred to its GI Clinical Services. A laptop was stolen from an employee's private residence, exposing patient names, Social Security numbers, and medical record numbers. The employee was counseled, suspended for 3 days, and given additional HIPAA training. OCR's investigation found no high-risk findings and confirmed existing safeguards including PGP whole disk encryption, encrypted USB drives, and secure VPN connections.

Affected (this filing): 12,580